CVE-2023-0080
Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability.
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.15.0 via a shortcode attribute. This allows subscriber-level attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-01-05 CVE Reserved
- 2023-01-23 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-02 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4 | 2024-08-02 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cusrev Search vendor "Cusrev" | Customer Reviews For Woocommerce Search vendor "Cusrev" for product "Customer Reviews For Woocommerce" | < 5.16.0 Search vendor "Cusrev" for product "Customer Reviews For Woocommerce" and version " < 5.16.0" | wordpress |
Affected
|